In Mahara prior to 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mahara mahara |
||
mahara mahara 21.10.0 |